CVE-2022-31879

CVE-2022-31879 affects Online Fire Reporting System v1.0, with a confirmed SQL injection via the date parameter. Affects the application logic where user input is used in SQL queries, enabling potentially arbitrary queries and unauthorized data access or manipulation as described in multiple sour...

CVE-2022-31984

CVE-2022-31984 affects Online Fire Reporting System v1.0. The connected documents specify a SQL Injection vulnerability in /ofrs/admin/requests/take_action.php?id=, caused by improper handling of user-supplied input. The Nuclei template lists this as a high-severity SQLi with potential impact inc...

CVE-2022-31974

Online Fire Reporting System v1.0 is affected by an SQL Injection in the admin reports date parameter (/ofrs/admin/?page=reports&date=). The issue is triggered by unsafely concatenated SQL, allowing arbitrary queries and potentially data exposure or tampering. The Nuclei template and CNVD/CNNVD e...

CVE-2022-31975

Vulnerability : Online Fire Reporting System v1.0 is affected by a SQL Injection in the admin user management endpoint. The issue occurs via /ofrs/admin/?page=user/manage_user&id= (lack of input validation in the parameter), enabling manipulation of SQL queries. Impact : could lead to arbitrary S...

CVE-2022-31415

Online Fire Reporting System v1.0 is affected by CVE-2022-31415: a SQL injection vulnerability via a GET parameter in /report/list.php. The underlying issue is unsanitized/unsafe SQL statements constructed from external input, enabling an attacker to alter queries and potentially access or exfilt...

CVE-2022-31977

Online Fire Reporting System v1.0 is affected by a SQL Injection in Master.php?f=delete_team. The nuclei template confirms an SQLi path; CVE-2022-31977 has a reported CVSSv3.1 score of 9.8 and CWE-89. Impact describes arbitrary SQL execution, data leakage or manipulation, with high confidentialit...

CVE-2022-31976

Online Fire Reporting System v1.0 is affected by a SQL Injection vulnerability in Master.php?f=delete_request. The issue arises from unsafely incorporating user input into SQL queries, enabling an attacker to execute arbitrary SQL commands and potentially cause data leakage, modification, or comp...

CVE-2022-31983

CVE-2022-31983 affects Online Fire Reporting System v1.0. The vulnerability is a SQL Injection via the parameter /ofrs/admin/?page=requests/manage_request&id=. The root cause described across sources is lack of validation/sanitization of user input used in SQL queries. Impact stated in sources in...

CVE-2022-31982

Online Fire Reporting System v1.0 is affected by a SQL Injection vulnerability in the admin interface parameter id (path: /ofrs/admin/?page=requests/view_request&id=). The issue is caused by insufficient input validation/exploitation of untrusted input, enabling arbitrary SQL queries and partial/...

CVE-2022-31978

Online Fire Reporting System v1.0 is affected by a SQL injection in /ofrs/classes/Master.php?f=delete_inquiry. The vulnerability stems from unsafely constructed SQL queries, allowing an attacker to execute arbitrary SQL and potentially cause data disclosure, modification, or unauthorized access. ...

CVE-2022-31980

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/manage_team&id=. The root cause is unsanitized user input used in SQL queries, potentially enabling arbitrary SQL execution, data disclosure, or data manipulation. CVSS3.1 base score 7.2 (HIGH). Remediati...

CVE-2022-31981

Online Fire Reporting System v1.0 is affected by a SQL Injection vulnerability in the admin page parameter id (/ofrs/admin/?page=teams/view_team&id=). The Red Hat advisory also notes the same vector. Root cause identified as unsafe SQL construction leading to data exposure/manipulation; CVSS 3.1 ...

CVE-2022-31906

CVE-2022-31906 affects the Online Fire Reporting System v1.0. The vulnerability is a Cross-Site Scripting (XSS) flaw in the /ofrs/classes/Master.php path caused by lack of proper input validation and output encoding. This can enable attackers to run JavaScript in the victim’s browser, as describe...

CVE-2022-31973

CVE-2022-31973 affects the Online Fire Reporting System v1.0. The vulnerability arises in the file path /ofrs/classes/Master.php?f=delete_img, where filenames are not properly validated, enabling arbitrary file deletion. This is described consistently across multiple sources in the connected docu...

CVE-2022-34611

CVE-2022-34611 is an XSS vulnerability affecting Online Fire Reporting System (OFRS) v1.0. The flaw resides in the /index.php/?p=report endpoint, where a crafted payload placed into the "Contac #" field can execute arbitrary scripts/HTML. The NVD entry lists CVSS v3.1 base score 5.4 (Medium) with...